Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D4D51A4DE9CDF6FB453AFCB01193DF237A00FF7F3AB1C93C94A79553335C8FE/0/323830333a313133303a3a2f33322d3332203d3e20323734393238.roa
File:                     323830333a313133303a3a2f33322d3332203d3e20323734393238.roa (raw, json)
Hash identifier:          hXb61E1q5Ai176ppmioojqzT7/FFSOk9giR094dCEz4=
Subject key identifier:   3F:73:6F:00:49:67:A2:68:8F:0C:E6:65:AF:74:3D:90:D4:BE:72:72
Certificate issuer:       /CN=8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD
Certificate serial:       7A9B41A22ADE77A70113736963490B6C435D5FCB
Authority key identifier: 83:05:BD:A7:E4:0E:8F:8A:E4:D1:C7:1F:94:B2:AB:15:F2:16:AB:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D4D51A4DE9CDF6FB453AFCB01193DF237A00FF7F3AB1C93C94A79553335C8FE/0/323830333a313133303a3a2f33322d3332203d3e20323734393238.roa
Signing time:             Fri 15 May 2026 19:20:00 +0000
ROA not before:           Fri 15 May 2026 19:15:00 +0000
ROA not after:            Fri 14 May 2027 19:20:00 +0000
asID:                     274928
IP address blocks:        2803:1130::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D4D51A4DE9CDF6FB453AFCB01193DF237A00FF7F3AB1C93C94A79553335C8FE/0/8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D4D51A4DE9CDF6FB453AFCB01193DF237A00FF7F3AB1C93C94A79553335C8FE/0/8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9b:41:a2:2a:de:77:a7:01:13:73:69:63:49:0b:6c:43:5d:5f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD
        Validity
            Not Before: May 15 19:15:00 2026 GMT
            Not After : May 14 19:20:00 2027 GMT
        Subject: CN=3F736F004967A2688F0CE665AF743D90D4BE7272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:75:b8:fa:99:27:56:05:13:89:93:db:d5:
                    3e:7c:aa:16:89:fb:6e:4b:f3:33:d9:71:d6:7e:1f:
                    56:bf:aa:fc:77:1e:a7:3c:99:d7:e9:f3:19:9e:4e:
                    44:30:aa:fb:91:ee:63:64:8d:ff:f9:5b:7b:69:5c:
                    11:15:51:17:a1:18:60:c7:70:11:4d:df:4a:b7:52:
                    42:37:92:bf:36:2d:af:7f:81:90:89:2c:4e:9d:cb:
                    c8:4a:36:93:69:1c:59:78:e6:2c:a2:c2:1d:87:bc:
                    cc:60:af:96:ee:f7:99:97:dc:a3:9b:89:5e:e3:45:
                    53:b1:06:a4:8a:27:67:b7:92:a7:2c:f7:e8:dd:6c:
                    68:5e:58:03:52:23:8d:b5:71:b3:57:1f:f1:59:ec:
                    6e:67:b4:8b:d3:9e:90:60:2b:25:f2:e8:c5:ec:7c:
                    5f:c3:be:ac:7d:21:e4:e7:76:33:65:54:ff:f9:46:
                    b5:0f:d8:a6:29:8e:0d:8c:00:2f:8d:da:7f:ed:f2:
                    ea:b8:d4:80:b6:a3:b2:27:e3:1f:bf:5c:04:eb:60:
                    08:4d:19:24:72:c7:7d:59:91:5b:ed:63:a7:26:7e:
                    f7:a2:78:3d:21:f8:d4:03:44:01:f8:02:10:1d:5b:
                    ce:6c:4c:7e:7e:94:8e:5c:17:be:93:56:95:ea:79:
                    91:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:73:6F:00:49:67:A2:68:8F:0C:E6:65:AF:74:3D:90:D4:BE:72:72
            X509v3 Authority Key Identifier:
                keyid:83:05:BD:A7:E4:0E:8F:8A:E4:D1:C7:1F:94:B2:AB:15:F2:16:AB:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D4D51A4DE9CDF6FB453AFCB01193DF237A00FF7F3AB1C93C94A79553335C8FE/0/8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8305BDA7E40E8F8AE4D1C71F94B2AB15F216ABAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D4D51A4DE9CDF6FB453AFCB01193DF237A00FF7F3AB1C93C94A79553335C8FE/0/323830333a313133303a3a2f33322d3332203d3e20323734393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1130::/32

    Signature Algorithm: sha256WithRSAEncryption
         d7:dc:c7:28:f1:1c:03:24:29:28:a8:82:7c:42:fc:8d:30:e2:
         71:6e:4a:4b:a0:a6:c2:83:e0:1d:cb:57:ed:33:29:dc:94:0a:
         94:39:69:93:f1:83:28:0d:98:19:32:fa:b7:24:be:a5:94:2f:
         6d:86:4f:18:23:dd:d3:de:62:ef:b9:a6:9c:3d:9d:d5:b6:3e:
         6d:e2:2a:3b:d9:55:42:e5:4b:61:b7:67:6c:d6:c9:82:00:39:
         25:09:0d:5e:f4:41:df:c7:9d:78:74:41:6f:31:06:ef:c1:c1:
         be:f9:d2:39:27:05:d8:a4:05:90:16:c5:ce:92:75:e9:a1:f9:
         99:cf:63:36:bd:70:cf:10:b4:ba:8a:29:d7:6c:ed:dd:46:73:
         e5:70:26:19:b1:ad:f5:f0:b3:39:ba:6f:80:82:0f:41:ac:11:
         d9:76:46:36:79:df:c4:01:1c:df:c2:fe:0f:fb:ac:df:aa:c2:
         8b:70:48:ea:f2:a1:b6:f3:ad:9f:74:cf:7f:e6:0e:a6:30:49:
         42:48:6b:4a:2a:ae:e5:2e:1d:52:24:bc:c2:51:47:18:83:a4:
         43:0d:1e:9a:04:c2:05:f6:96:5f:c5:86:97:c3:1b:46:4d:c9:
         13:ad:f2:0a:4f:e2:30:d2:20:68:ec:35:a5:1f:00:36:ea:72:
         ff:fd:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:34:40 2026 by rpki-client